Guide to MS' Baseline Security Analyzer (MBSA)

Recently Microsoft released the Microsoft Baseline Security Analyzer (MBSA), to analyse Windows 2000/XP (& NT4 remotely) systems for potential security issues, e.g. Hotfixes not installed. This short guide will take you though configuring stand-alone PCs to use this tool.


Networking components

MBSA requires several Services installed & activate in order to ensure it can operate correctly. To account for any Windows 2000 differences please see information in brackets. To ensure these Services are available click on Start, (Settings) Control Panel, Network Connections (Network & Dial-up connections) & right click on your Internet connection & select Properties. Finally select the Networking tab.

Ensure that, as shown above, that Internet Protocol (TCP/IP) (Protocol), File & Printer Sharing for Microsoft Networks (Service) & Client for Microsoft Networks (Client) are installed. If any of these are not installed then select the Install button & select the Client/Service/Protocol & select the respective component to be installed.

After installation you can Tick the component to enable itís use, should you require it. Unticking the component will disable it. The most important thing to note here is that by merely installing the component it will add the required Service(s) for MBSA, disabling the components use will not affect itís functionality, e.g. In my case I disabled File & Printer Sharing for Microsoft Networks & Client for Microsoft Networks as I do not require nor wish to run them.

Click Ok once you have made all the changes necessary here & reboot your PC (Or at least disconnect & reconnect to the Internet).



Now click on Start, (Settings) Control Panel, Administrative Tools & select Services.

Whenever you intend to run MBSA load this utility, right click on & select Start for the following Services: Server & Workstation - You may find it more convenient to set these to Automatic instead, to do so right click on the respective Service & select Properties then the General tab & change the Startup type accordingly.

The Remote Registry service may also be required for some systems, though most likely not on stand-alone PCs (At least not on mine).

For more detailed information on adjusting Windows 2000/XP Services be sure to check out the Windows 2000 & Windows XP Services Guides. This can also aid you in better securing your system.


Go to next page !

Get weekly updates on new
articles, news and contests
in your mail!